WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Author Topic: Scalpel  (Read 3244 times)

Offline Sashank999

  • Sr. Member
  • ****
  • Posts: 390
Scalpel
« on: September 13, 2020, 11:50:20 PM »
Hi !

My request is to add Scalpel to the x86_64 TC v11 repo.

Thanks in advance.

Offline Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14619
Re: Scalpel
« Reply #1 on: September 14, 2020, 01:13:41 AM »
You've submitted many extensions to the repo (thanks) - why not this one?

Offline Sashank999

  • Sr. Member
  • ****
  • Posts: 390
Re: Scalpel
« Reply #2 on: September 14, 2020, 04:06:04 AM »
A tragedy happened ...

I was actually testing a script that would separate the .h, .la, .a, etc. -dev files and man pages into -doc as separate tczs from a given tce (my laziness led me). In the clean up process of the script I included "rm -rf "$FILE"/*" and accidentally ran it without any args.

And guess what... my whole sda5 partition containing TC x64 (with a lot of tczs), my data backup(along with the bloody script that caused this destruction and my favourite developing submitqc patch)  and dCore x64(only kernel and initrd, NP) was gone into ashes  :'( . Thank God I did not mount my Windows 10 or Phoenix OS. To recover sda5, I need Scalpel.
« Last Edit: September 14, 2020, 04:10:12 AM by Sashank999 »

Offline Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14619
Re: Scalpel
« Reply #3 on: September 14, 2020, 05:55:06 AM »
scalpel posted

Offline Sashank999

  • Sr. Member
  • ****
  • Posts: 390
Re: Scalpel
« Reply #4 on: September 18, 2020, 05:36:44 AM »
Hi !

Sorry for the late reply but :
1. The tcz doesn't have a base config file. The file at https://github.com/sleuthkit/scalpel/blob/master/scalpel.conf should be included in the base tcz
2. It gets a segmentation fault exactly at 4.2% of recovery of my ext4 partition. I don't know why. Can anyone help me ?

Offline Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14619
Re: Scalpel
« Reply #5 on: September 18, 2020, 08:53:10 AM »
Where does it look for scalpel.conf - /usr/local/etc, /usr/local/etc/scalpel or ?

Offline Sashank999

  • Sr. Member
  • ****
  • Posts: 390
Re: Scalpel
« Reply #6 on: September 19, 2020, 12:17:33 AM »
I tested keeping it in those both locations but it doesn't consider them. It looks for conf in current location. Even the man page says that. So, we should keep it in ~.

Do you know anything about "Segmentation Fault" error ?

Offline Rich

  • Administrator
  • Hero Member
  • *****
  • Posts: 11282
Re: Scalpel
« Reply #7 on: September 19, 2020, 06:05:02 AM »
Hi Sashank999
Segmentation Fault  means the program tried to access a memory location that does not exist. Was that the entire
error message? If you include the  -v  parameter when running the program, does it provide any useful information?

Offline Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14619
Re: Scalpel
« Reply #8 on: September 20, 2020, 07:32:20 AM »
scalpel.conf added and extension reposted

Offline Sashank999

  • Sr. Member
  • ****
  • Posts: 390
Re: Scalpel
« Reply #9 on: September 20, 2020, 08:20:14 AM »
Hi Rich, Juanito !

The -v option took it upto 10.1% but still the same error. Output redirected via a pipe to output file via tee command. I replaced lines containing "A tcz footer was found at : (Disk address)" lines with letters "TL" to reduce its size from 10MB to 0.9MB. Here : https://safenote.co/r/5f67729a47ea99@12613152

Thanks for reposting Juanito.